Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e3135302e3137302e302f32342d3234203d3e20323635333033.roa
File:                     3230302e3135302e3137302e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          jc6sT5ktpIYQvURp0jCEWhmPYPgK+7+d1aBEtMguzD0=
Subject key identifier:   D5:BD:FA:83:A1:94:F4:18:E6:96:8B:EA:4A:CD:AF:ED:CA:31:B2:15
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       6F9837A477A5165BF1C702ABCE499959D3C0B246
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e3135302e3137302e302f32342d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 13:58:08 +0000
ROA not before:           Mon 08 Apr 2024 13:53:08 +0000
ROA not after:            Mon 07 Apr 2025 13:58:08 +0000
asID:                     265303
IP address blocks:        200.150.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:98:37:a4:77:a5:16:5b:f1:c7:02:ab:ce:49:99:59:d3:c0:b2:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 13:53:08 2024 GMT
            Not After : Apr  7 13:58:08 2025 GMT
        Subject: CN=D5BDFA83A194F418E6968BEA4ACDAFEDCA31B215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c4:53:3c:d8:b7:37:ed:2c:ab:1b:24:33:73:
                    fc:77:f5:dc:40:41:6d:bb:cb:e1:c4:9a:3f:02:3d:
                    bd:22:6d:11:49:06:da:5c:52:24:a3:45:8c:3d:16:
                    1c:5d:84:75:a0:43:bf:66:ba:79:4b:5e:b2:14:63:
                    67:6d:8f:0c:69:93:99:34:2a:cc:4a:d9:6c:94:b8:
                    9a:eb:9d:64:5c:95:b8:af:5c:fa:31:3c:b5:83:07:
                    a4:23:e5:bc:4f:8f:b0:4b:55:52:6f:db:86:ed:10:
                    db:82:a5:8b:5a:cc:2b:65:ee:7f:82:76:b1:40:d3:
                    ff:69:24:e4:33:e7:e5:91:85:a2:56:33:f9:84:b0:
                    d8:2e:38:29:62:a5:fc:12:fe:5b:e9:fa:ce:79:b7:
                    ba:b3:c9:54:df:ac:a0:50:8f:94:65:46:dd:0f:97:
                    12:a6:05:3f:29:27:53:ea:6a:fe:a2:58:3c:cf:25:
                    aa:89:e5:90:3c:72:4f:93:0c:6d:3e:27:52:99:f6:
                    b0:df:b6:ae:3c:4e:d7:34:ba:f6:67:6d:f7:3f:bf:
                    fd:dc:ce:f5:44:72:4f:24:73:95:c8:5a:2b:b9:4b:
                    0d:7f:7f:cc:b6:0a:26:e4:ee:fe:7f:d5:19:5b:55:
                    17:29:3e:87:e7:33:93:81:1a:a4:c0:e5:cf:de:33:
                    7d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BD:FA:83:A1:94:F4:18:E6:96:8B:EA:4A:CD:AF:ED:CA:31:B2:15
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e3135302e3137302e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:55:b9:5c:8e:cf:4f:d6:f7:f5:d3:05:43:88:ea:78:45:2e:
         17:f0:5b:17:7b:b2:bd:c3:97:9a:22:ce:f6:41:d1:a3:de:f9:
         6b:ab:2a:80:2f:99:27:ea:e4:dc:48:6a:cf:8e:0e:45:97:ad:
         c0:41:8b:8d:4b:c9:c9:13:dd:2f:a6:f7:65:c9:26:23:b9:db:
         99:f2:65:4c:19:f1:28:31:0a:8c:8b:c4:48:2b:ae:2b:8c:1b:
         6d:b7:24:1c:71:d9:f0:9a:da:83:98:9c:26:fc:0d:86:87:8d:
         ec:fb:f5:37:5b:c0:4c:6a:1d:45:1a:6b:c4:72:91:71:b4:89:
         ce:52:6b:20:87:e4:08:1c:e4:e4:22:2d:5c:d8:e3:9c:80:56:
         49:8b:68:b0:80:12:08:4d:f5:d3:9c:d8:23:ef:1c:c5:0a:d9:
         9d:47:18:b9:10:6d:b8:76:b8:b5:a2:f2:6e:b1:74:48:bd:99:
         d5:48:a5:74:aa:b5:3d:b8:f9:d3:28:5b:52:6b:c9:3b:f2:3d:
         d1:c1:c5:6a:46:ca:d6:f7:9c:47:bd:6a:bb:dd:bd:21:7c:d6:
         a1:e5:c3:c5:7a:f3:c7:b1:b7:9a:8b:64:c2:b3:12:8b:54:8b:
         e2:51:81:78:1b:aa:1f:a1:59:1d:6d:65:d8:13:f6:5e:6c:d0:
         51:83:47:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 22:55:04 2024 by rpki-client on console-fra.rpki-client.org